AMENDMENT 3 P-9902 MG 

In Re Application of ZOLOTOREV et al. 

IN THE CLAIMS: 

Please amend the claims as follows: 

1. (currently amended) A method for effecting payments comprising steps of: 
replenishing a payer device by an operation of primarily filling a payment certificate, in 
which a payment certificate base is created in the payer device and a payment certificate 
signature is obtained by means of making a blind money signature of an operator; 
performing an operation of opening a payees account; performing a payment operation in 
which the payment certificate signature and an identifier of the payment certificate base 
are included into payment data delivered to a payee device by means of which a payee 
order is formed including the payment certificate signature and the identifier of the 
payment certificate base; delivering the formed payee order to a payment server in which 
the payee's account is credited on the basis of the payee order in the case of absence of an 
information that the payment certificate was utilized, according to the validity of the 
delivered payment certificate signature; and forming the operator's response to the payee 
order, by means of which response the payment operation is judged, characterized in that 
the method is further comprising steps of: including an identifier of a public key into the 
payment certificate base, said public key corresponding to an arbitrary secret key of a 
payer, wherein the public key is accepted as thett public key of the payment certificate 
and the secret key of the payer is accepted as a secret key of the payment certificate; 
including a payer order signed with the secret key of the payment certificate into the 
payment data, and including an information on the payee and the identifier of the payment 
certificate base into the payer order; and the step of crediting the payee's account is 
carried out according to the validity of the signature on the payer order. 

2. (previously presented) The method according to claim 1, characterized in that in the 
step of performing the payment operation the signed payer order is entered into the 
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operator's information storage. 

3. (previously presented) The method according to claim 1, characterized in that in the 
step of replenishing the payer device a money demand is formed including data for 
making a blind money signature, and is delivered to the payment server in which a 
replenishment source and replenishment amount are determined according to the money 
demand; data to be unblinded are created in the step of making the blind money signature 
by processing data for making the blind money signature, that are comprised in the 
demand, with a secret money key corresponding to the replenishment amount, whereupon 
the payment certificate signature is made in the payer device by unblinding. 

4. (previously presented) The method according to claim 3, characterized in that in the 
step of replenishing the payer device by the operation of primarily filling the payment 
certificate a blinded identifier of the created payment certificate base is included as the 
data for making the blind money signature into the money demand being formed. 

5. (currently amended) The method according to claim 1, characterized in that in the step 
of performing the payment operation a payee receipt is included into the operators 
response to the payee order, which receipt being signed with antfac arbitrary secret key of 
the operator, and the performing of the payment for the payee is judged according to the 
validity of the signature on the payee receipt. 

6. (previously presented) The method according to claim 1, characterized in that in the 
step of performing the payment operation data are formed in the payee device with the 
use of the operator's response to the payee order and delivered to the payer device, 
according to which data the performing of the payment for the payer is judged. 
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7. (currently amended) The method according to claim 6, characterized in that in the step 
of performing the payment operation a payer receipt is included into the operator's 
response to the payee order and into the data delivered to the payer device, which receipt 
being signed v^ith an the arbitrary secret key of the operator, and the performing of the 
payment for the payer is judged according to the validity of the signature on the payer 
receipt. 

8. (previously presented) The method according to claim 7, characterized in that the payer 
receipt is encrypted by an arbitrary encryption key of the payer prior to including said 
receipt into the operator's response to the payee order. 

9. (previously presented) The method according to claim 1, characterized in that in 
performing operations with the payment certificate the public key of the payment 
certificate converted by an arbitrary one-way function is used as the identifier of the 
payment certificate base. 

10. (previously presented) The method according to claim 1, characterized in that in 
performing operations with the payment certificate the public key of the payment 
certificate is used as the identifier of the public key of the payment certificate. 

11. (previously presented) The method according to claim 1, characterized in that in the 
step of replenishing the payer device the validity of the made payment certificate 
signature is verified. 

12. (currently amended) The method according to claim 1, characterized in that in the step 
of opening the account an arbitrary secret key is accepted as the secret key of the account, 
and the public key corresponding to the secret key of the account is delivered to the 
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payment server as thea public key of the account being opened. 

13. (previously presented) The method according to claim 1, characterized in that 
conditions of payment are included into the payer order. 

14. (previously presented) The method according to claim 13, characterized in that payee 
obligation data are included into the conditions of payment comprised in the payer order. 

15. (previously presented) The method according to claim 14, characterized in that prior to 
performing the payment operation, the payee obligation data are signed with an arbitrary 
secret key of the payee, and the payer verifies the payee's signature on the payee 
obligation data prior to performing the payment operation. 

16. The method according to claim 13, characterized in that in the payer device in the step 
of forming the payment data, the payee obligation data are processed by an arbitrary 
one-way function, and data obtained in this processing are included into the payer order 
as the conditions of payment. 

17. (previously presented) The method according to claim 1, characterized in that the 
payer order is encrypted by an arbitrary public encryption key of the operator prior to 
including them into the payment data. 

18. (currently amended) The method according to claim [1]3, characterized in that in the 
step of replenishing the payer device [a]the payer's account is used as [a]the 
replenishment source. 

19. (currently amended) The method according to claim [1]3, characterized in that in the 
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Step of replenishing the payer device a bank card is used as [a]the replenishment source. 

20. (previously presented) The method according to claim 1 , characterized in that in the 
step of performing the payment operation the payee appears as the payer. 

21. (previously presented) The method according to claim 1, characterized in that in the 
step of performing the payment operation a part of a payment certificate value is returned 
to the payer device. 

22. (previously presented) The method according to claim 1, characterized m that the step 
of replenishing the payer device is performed from funds of an intermediate payer. 

23. (currently amended) The method according to claim 22, characterized in that in the 
step of replenishing the payer device, the data blinded in the payer device in the step of 
making the blind money sig nature of the operator are subjected to an additional blinding 
in the payer device of the intermediate payer. 

24. (currently amended) A method for effecting payments comprising steps of: 
replenishing a payer device by an operation of primarily filling a payment certificate, in 
which a payment certificate base is created in the payer device and a payment certificate 
signature is obtained by means of making a blind money signature of an operator; 
performing an operation of opening a payee's account; performing a payment operation in 
which the payment certificate signature and an identifier of the payment certificate base 
are included into payment data delivered to a payee device by means of which a payee 
order is formed including the payment certificate signature and the identifier of the 
payment certificate base; delivering the formed payee order to a payment server in which 
the payee's account is credited on the basis of the payee order in the case of absence of an 
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information that the payment certificate was utilized, according to the validity of the 
delivered payment certificate signature; and forming the operator's response to the payee 
order, by means of which response the payment operation is judged, characterized in that 
the method is further comprising steps of:: including an identifier of a public key into the 
payment certificate base, said public key corresponding to an arbitrary secret key of athc 
paye reir , wherein the public key is accepted as [a]the public key of the payment 
certificate and the secret key of the payer[e] is accepted as [a]the secret key of the 
payment certificate; replenishing perfoniiing the replenishment of the payer device by 
means of an operation of replenishing the payment certificate, in which operation a blind 
money signature of the operator on the payment certificate signature already being in the 
payer device is made; including a payer order signed with the secret key of the payment 
certificate into the payment data, and including an information on the payee and the 
identifier of the payment certificate base into the payer order; and the step of crediting the 
payee's account is carried out according to the validity of the signature on the payer order. 

25. (previously presented) The method according to claim 24, characterized in that in the 
step of replenishing the payer device a money demand is formed including data for 
making a blind money signature, and is delivered to the payment server in which a 
replenishment source and replenishment amount are determined according to the money 
demand; data to be unblinded are created in the step of making the blind money signature 
by processing data for making the blind money signature, that are comprised in the 
demand, with a secret money key corresponding to the replenishment amount, whereupon 
the payment certificate signature is made in the payer device by unblinding. 

26. (previously presented) The method according to claim 25, characterized in that in the 
step of replenishing the payer device by the operation of primarily filling the payment 
certificate a blinded identifier of the created payment certificate base is included as the 
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data for making the blind money signature into the money demand being formed. 

27. (previously presented) The method according to claim 25, characterized in that in the 
step of replenishing the payer device by the operation of replenishing the payment 
certificate a blinded payment certificate signature is included as the data for making the 
blind money signature into the money demand being formed. 

28. (previously presented) The method according to claim 24, characterized in that in the 
step of performing the payment operation the signed payer order is entered into the 
operator's information storage. 

29. (currently amended) The method according to claim 24. characterized in that in the 
step of performing the payment operation a payee receipt is included into the operator's 
response to the payee order, which receipt bing signed with [the]an arbitrary secret key of 
the operator, and the performing of the payment for the payee is judged according to the 
validity of the signature on the payee receipt. 

30. (previously presented) The method according to claim 24, characterized in that in the 
step of performing the payment operation data are formed in the payee device with the 
use of the operator's response to the payee order and delivered to the payer device, 
according to which data the performing of the payment for the payer is judged. 

31. (currently amended) The method according to claim 30, characterized in that in the 
step of performing the payment operation a payer receipt is included into the operator's 
response to the payee order and into the data delivered to the payer device, which receipt 
being signed with an [the] arbitrary secret key of the operator, and the performing of the 
payment for the payer is judged according to the validity of the signature on the payer 
receipt. 
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32. (previously presented) The method according to claim 31, characterized in that the 
payer receipt is encrypted by an arbitrary encryption key of the payer prior to including 
said receipt into the operator's response to the payee order. 

33. (previously presented) The method according to claim 24, characterized in that in 
performing operations w^ith the payment certificate the public key of the payment 
certificate converted by an arbitrary one-way function is used as the identifier of the 
payment certificate base. 

34. (previously presented) The method according to claim 24, characterized in that in 
performing operations with the payment certificate the public key of the payment 
certificate is used as the identifier of the public key of the payment certificate. 

35. (previously presented) The method according to claim 24, characterized in that in the 
step of replenishing the payer device the validity of the made payment certificate 
signature is verified. 

36. (currently amended) The method according to claim 24, characterized in that in the 
step of opening the account an arbitrary secret key is accepted as the secret key of the 
account, and the public key corresponding to the secret key of the account is delivered to 
the payment server as [a] the public key of the account being opened. 

37. (previously presented) The method according to claim 24, characterized in that 
conditions of payment are included into the payer order. 

38. (previously presented) The method according to claim 37, characterized in that payee 
obligation data are included into the conditions of payment comprised in the payer order. 
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39. (previously presented) The method according to claim 38, characterized in that prior to 
performing the payment operation, the payee obligation data are signed with an arbitrary 
secret key of the payee, and the payer verifies the payee's signature on the payee 
obligation data prior to performing the payment operation. 

40. (previously presented) The method according to claim 38, characterized in that in the 
payer device in the step of forming the payment data, the payee obligation data are 
processed by an arbitrary one-way function, and data obtained in this processing are 
included into the payer order as the conditions of payment. 

41. (previously presented) The method according to claim 24, characterized in that the 
payer order is encrypted by an arbitrary public encryption key of the operator prior to 
including them into the payment data. 

42. (currently amended) The method according to claim 2[4]5, characterized in that in the 
step of replenishing the payer device a payer's account is used as [a]the replenishment 
source. 

43. (currently amended) The method according to claim 2 [4] 5, characterized in that in the 
step of replenishing the payer device a bank card is used as [a] the replenishment source. 

44. (previously presented) The method according to claim 24, characterized in that in the 
step of performing the payment operation the payee appears as the payer. 

45. (previously presented) The method according to claim 24, characterized in that in the 
step of performing the payment operation a part of a payment certificate value is returned 
to the payer device. 
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46. (previously presented) The method according to claim 24, characterized in that the 
step of replenishing the payer device is performed from funds of an intermediate payer. 

47. (previously presented) The method according to claim 46, characterized in that in the 
step of replenishing the payer device, data blinded in the payer device in the step of 
making the blind money signature of the operator are subjected to an additional blinding 
in the payer device of the intermediate payer. 

48. (currently amended) A method for effecting payments comprising steps of: 
replenishing a payer device by an operation of primarily filling a payment certificate, in 
which a payment certificate base is created in the payer device and a payment certificate 
signature is obtained by means of making a blind money signature of an operator; 
performing an operation of opening a payee's account; performing a payment operation in 
which an identifier of the payment certificate base is included into payment data delivered 
to a payee device by means of which a payee order is formed including the identifier of 
the payment certificate base received from a payer; delivering the formed payee order to a 
payment server in which the payee's account is credited on the basis of the payee order; 
forming the operator*s response to the payee order, by means of which response the 
payment operation is judged, characterized in that the method is further comprising steps 
of: including an identifier of a public key into the payment certificate base, said public 
key corresponding to an arbitrary secret key of [a]the payer, wherein the public key is 
accepted as [a]the public key of the payment certificate and the secret key of the payer is 
accepted as [a] the secret key of the payment certificate; opening a payment account 
associated with the payment certificate base; carrying out [the]an operation of crediting 
the payment account, in which a payment certificate signature is delivered to the payment 
server, choosing the level of said signature arbitrarily within the level of the payment 
certificate, and the operation of crediting the payment account is carried out in accordance 
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with the excess of the level of the delivered signature above the level of the payment 
account; including a payer order signed with the secret key of the payment certificate into 
the payment data, and including an information on the payee and the identifier of the 
payment certificate base into the payer order; and the step of crediting the payee's account 
is carried out according to the validity of the signature on the payer order from funds of 
the payment account. 

49. (previously presented) The method according to claim 48, characterized in that the 
payment account associated with the payment certificate base is opened in the step of 
performing the payment operation. 

50. (currently amended) The method according to claim 48, characterized in that the 
crediting operation of crediting the payment account is carried out in the step of 
performing the payment operation. 

51. (previously presented) The method according to claim 48, characterized in that in the 
step of performing the payment operation the signed payer order is entered into the 
operator's information storage. 

52. (previously presented) The method according to claim 48, characterized in that in the 
step of replenishing the payer device a money demand is formed including data for 
making a blind money signature, and is delivered to the payment server in which a 
replenishment source and replenishment amount are determined according to the money 
demand; data to be unblinded are created in the step of making the blind money signature 
by processing data for making the blind money signature, that are comprised in the 
demand, with a secret money key corresponding to the replenishment amount, whereupon 
the payment certificate signature is made in the payer device by unblinding. 
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53. (previously presented) The method according to claim 52, characterized in that in the 
step of replenishing the payer device by the operation of primarily filling the payment 
certificate a blinded identifier of the created payment certificate base is included as the 
data for making the blind money signature into the money demand being formed. 

54. (previously presented) The method according to claim 48, characterized in that in the 
step of performing the payment operation a payee receipt is included into the operator's 
response to the payee order, which receipt being signed with the arbitrary secret key of 
the operator, and the performing of the payment for the payee is judged according to the 
validity of the signature on the payee receipt. 

55. (previously presented) The method according to claim 48, characterized in that in the 
step of performing the payment operation data are formed in the payee device with the 
use of the operator's response to the payee order and delivered to the payer device, 
according to which data the performing of the payment for the payer is judged. 

56. (previously presented) The method according to claim 55, characterized m that in the 
step of performing the payment operation a payer receipt is included into the operator's 
response to the payee order and into the data delivered to the payer device, which receipt 
being signed with the arbitrary secret key of the operator, and the performing of the 
payment for the payer is judged according to the validity of the signature on the payer 
receipt. 

57. (previously presented) The method according to claim 56, characterized m that the 
payer receipt is encrypted by an arbitrary encryption key of the payer prior to including 
said receipt into the operator's response to the payee order. 
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58. (previously presented) The method according to claim 48, characterized in that in 
performing operations with the payment certificate the public key of the payment 
certificate converted by an arbitrary one-way function is used as the identifier of the 
payment certificate base. 

59. (previously presented) The method according to claim 48, characterized in that in 
performing operations with the payment certificate the public key of the payment 
certificate is used as the identifier of the public key of the payment certificate. 

60. (previously presented) The method according to claim 48, characterized in that in the 
step of replenishing the payer device the validity of the made payment certificate 
signature is verified. 

61. (currently amended) The method according to claim 48, characterized in that in the 
step of opening the account an arbitrary secret key is accepted as the secret key of the 
account, and the public key corresponding to the secret key of the account is delivered to 
the payment server as [a]the public key of the account being opened. 

62. (previously presented) The method according to claim 48, characterized in that 
conditions of payment are included into the payer order. 

63. (previously presented) The method according to claim 62, characterized in that payee 
obligation data are included into the conditions of payment comprised in the payer order. 

64. (previously presented) The method according to claim 63, characterized in that prior to 
performing the payment operation, the payee obligation data are signed with an arbitrary 
secret key of the payee, and the payer verifies the payee's signature on the payee 
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obligation data prior to performing the payment operation. 

65. (previously presented) The method according to claim 6 [2] 3, characterized in that in 
the payer device in the step of forming the payment data, the payee obligation data are 
processed by an arbitrary one-way function, and data obtained in this processing are 
included into the payer order as the conditions of payment. 

66. (previously presented) The method according to claim 48, characterized in that the 
payer order is encrypted by an arbitrary public encryption key of the operator prior to 
including them into the payment data. 

67. (currently amended) The method according to claim 52 [ 481, characterized in that in 
the step of replenishing the payer device [a]the payer's account is used as [a]the 
replenishment source. 

68. (currently amended) The method according to claim [48]_52, characterized in that in 
the step of replenishing the payer device a bank card is used as [a]the replenishment 
source. 

69. (previously presented) The method according to claim 48, characterized in that in the 
step of performing the payment operation the payee appears as the payer. 

70. (previously presented) The method according to claim 48, characterized in that in the 
step of performing the payment operation a part of a payment certificate value is returned 
to the payer device. 

71. (currently amended) The method according to claim [48] 52, characterized in that in 
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the step of replenishing the payer device, [a]the payment account associated with the base 
of one of payment certificates is used as [a]the replenishment source. 

72. (previously presented) The method according to claim 48, characterized in that the 
step of replenishing the payer device is performed from funds of an intermediate payer. 

73. (previously presented) The method according to claim 72, characterized in that in the 
step of replenishing the payer device, data blinded in the payer device in the step of 
making the blind money signature of the operator are subjected to an additional blinding 
in the payer device of the intermediate payer. 

74. (currently amended) A method for effecting payments comprising steps of: 
replenishing a payer device by an operation of primarily filling a payment certificate, in 
which a payment certificate base is created in the payer device and a payment certificate 
signature is obtained by means of making a blind money signature of an operator; 
performing an operation of opening a payee's account; performing a payment operation in 
which an identifier of the payment certificate base is included into payment data delivered 
to a payee device by means of which a payee order is formed including the identifier of 
the payment certificate base received from a payer; delivering the formed payee order to a 
payment server in which the payee's account is credited on the basis of the payee order; 
forming the operator's response to the payee order, by means of which response the 
payment operation is judged, characterized in that the method is further comprising steps 
of: including an identifier of a public key into the payment certificate base, said public 
key corresponding to an arbitrary secret key of [a]the payer, wherein the public key is 
accepted as [a]the public key of the payment certificate and the secret key of the payer is 
accepted as [a]the secret key of the payment certificate; pcrfomiing the o p eration of 
replenishing the payer device by means of an operation of replenishing the payment 
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certificate, in which a blind money signature of the operator on the payment certificate 
signature already being in the payer device is made; opening a payment account 
associated with the payment certificate base; carrying out [the]an operation of crediting 
the payment account, in which a payment certificate signature is delivered to the payment 
server, choosing the level of said signature arbitrarily within the level of the payment 
certificate, and the operation of crediting the payment account is carried out in accordance 
with the excess of the level of the delivered signature above the level of the payment 
account; including a payer order signed with the secret key of the payment certificate into 
the payment data, and including an information on the payee and the identifier of the 
payment certificate base into the payer order; and the step of crediting the payee's account 
is carried out according to the validity of the signature on the payer order from funds of 
the payment account. 

75. (previously presented) The method according to claim 74, characterized in that the 
payment account associated with the payment certificate base is opened in the step of 
performing the payment operation. 

76. (currently amended) The method according to claim 74, characterized in that the 
operation of crediting the pavment account o p e r ation is carried out in the step of 
performing the payment operation. 

77. (previously presented) The method according to claim 74, characterized in that in the 
step of performing the payment operation the signed payer order is entered into the 
operator's information storage. 

78. (previously presented) The method according to claim 74, characterized in that in the 
step of replenishing the payer device a money demand is formed including data for 
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making a blind money signature, and is delivered to the payment server in which a 
replenishment source and replenishment amount are determined according to the money 
demand; data to be unblinded are created in the step of making the blind money signature 
by processing data for making the blind money signature, that are comprised in the 
demand, with a secret money key corresponding to the replenishment amount, whereupon 
the payment certificate signature is made in the payer device by unblinding. 

79. (previously presented) The method according to claim 78, characterized in that in the 
step of replenishing the payer device by the operation of primarily filling the payment 
certificate a blinded identifier of the created payment certificate base is included as the 
data for making the blind money signature into the money demand being formed. 

80. (previously presented) The method according to claim 78, characterized in that in the 
step of replenishing the payer device by the operation of replenishing the payment 
certificate a blinded payment certificate signature is included as the data for making the 
blind money signature into the money demand being formed. 

81. (previously presented) The method according to claim 74, characterized in that in the 
step of performing the payment operation a payee receipt is included into the operator's 
response to the payee order, which receipt being signed with the arbitrary secret key of 
the operator, and the performing of the payment for the payee is judged according to the 
validity of the signature on the payee receipt. 

82. (previously presented) The method according to claim 74, characterized in that in the 
step of performing the payment operation data are formed in the payee device with the 
use of the operator*s response to the payee order and delivered to the payer device, 
according to which data the performing of the payment for the payer is judged. 
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83. (previously presented) The method according to claim 82, characterized in that in the 
step of performing the payment operation a payer receipt is included into the operator's 
response to the payee order and into the data delivered to the payer device, which receipt 
being signed with the arbitrary secret key of the operator, and the performing of the 
payment for the payer is judged according to the validity of the signature on the payer 
receipt. 

84. (previously presented) The method according to claim 83, characterized in that the 
payer receipt is encrypted by an arbitrary encryption key of the payer prior to including 
said receipt into the operator's response to the payee order. 

85. (previously presented) The method according to claim 74, characterized in that in 
performing operations with the payment certificate the public key of the payment 
certificate converted by an arbitrary one-way function is used as the identifier of the 
payment certificate base. 

86. (previously presented) The method according to claim 74, characterized in that in 
performing operations with the, payment certificate the public key of the payment 
certificate is used as the identifier of the public key of the payment certificate. 

87. (previously presented) The method according to claim 74, characterized in that in the 
step of replenishing the payer device the validity of the made payment certificate 
signature is verified. 

88. (currently amended) The method according to claim 74, characterized in that in the 
step of opening the account an arbitrary secret key is accepted as the secret key of the 
account, and the public key corresponding to the secret key of the account is delivered to 
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the payment server as [a] the public key of the account being opened. 

89. (previously presented) The method according to claim 74, characterized in that 
conditions of payment are included into the payer order. 

90. (previously presented) The method according to claim 89, characterized in that payee 
obligation data are included into the conditions of payment comprised in the payer order. 

91. (previously presented) The method according to claim 90, characterized in that prior to 
performing the payment operation, the payee obligation data are signed with an arbitrary 
secret key of the payee, and the payer verifies the payee*s signature on the payee 
obligation data prior to performing the payment operation. 

92. (currently amended) The method according to claim [8] 90, characterized in that the 
payer device in the step of forming the payment data, the payee obligation data are 
processed by an arbitrary one-way function, and data obtained in this processing are 
included into the payer order as the conditions of payment. 

93. (previously presented) The method according to claim 74, characterized in that the 
payer order is encrypted by an arbitrary public encryption key of the operator prior to 
including them into the payment data. 

94. (currently amended) The method according to claim 7 8 [4], characterized in that in 
the step of replenishing the payer device a payer's account is used as [a] the replenishment 
source. 

95. (currently amended) The method according to claim 7 8 [4], characterized in that in 
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the step of replenishing the payer device a bank card is used as [a] the replenishment 
source. 

96. (previously presented) The method according to claim 74, characterized in that in the 
step of performing the payment operation the payee appears as the payer. 

97. (previously presented) The method according to claim 74, characterized in that in the 
step of performing the payment operation a part of a payment certificate value is returned 
to the payer device. 

98. (currently amended) The method according to claim 7 8 [4], characterized in that in 
the step of replenishing the payer device, [a] the payment account associated w^ith the 
base of one of payment certificates is used as [a] the replenishment source. 

99. (previously presented) The method according to claim 74, characterized in that the 
step of replenishing the payer device is performed from funds of an intermediate payer. 

100. (previously presented) The method according to claim 99, characterized in that in the 
step of replenishing the payer device, data blinded in the payer device in the step of 
making the blind money signature of the operator are subjected to an additional blinding 
in the payer device of the intermediate payer. 

101. (currently amended) An apparatus for effecting payments comprising a payer 
device, payee device and payment server interconnected by teleconmiunication nets, the 
payer device comprising a means for replenishing the payer device by the use of making a 
blind money signature of an operator, and the payment server comprising a means for 
making a money signature, characterized in that the payer device further comprises a 
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means for creating a payment certificate base by processing a public key of the payment 
certificate with a one-way function, a means for storing the created payment certificate 
base in a storage device, and a means for forming a payer order signed with a secret key 
of the payment certificate; the. payee device comprises a means for forming a payee order 
including the payer order; the payment server further comprises a means for performing a 
payment operation, a means for serving a database of payment accounts, and a means for 
serving a database of accounts, wherein said means for performing a payment operation 
has a means for verifying a signature on the payer order and a means for making a signed 
payee receipt, said means for serving the database of payment accounts has a means for 
verifying the money signature, and the means for replenishing the payer device by the use 
of making the blind money signature of the operator is realized using a means for 
increasing the level of [the] a payment certificate signature. 

102. (previously presented) The apparatus according to claim 101, characterized in that 
the payee device comprises a means for opening a public key account, and said means for 
serving the database of accounts has a means for opening a public key account. 

103. (previously presented) The apparatus according to claim 101, characterized in that 
the payer device comprises a means for opening a public key account, and said means for 
serving the database of accounts has a means for opening a public key account. 

104. (previously presented) The apparatus according to claim 101, characterized in that 
said means for increasing the level of the payment certificate signature has a means for 
forming a money demand including a blinded payment certificate signature, a means for 
unbinding the data to be unblinded comprised in a response to the money demand, and a 
means for entering the result of unbHnding into said storage device, and the payment 
server comprises a means for processing the money demand, wherein said means for 
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processing the money demand has a means for making the money signature. 

105. (previously presented)The apparatus according to claim 101, characterized in that 
said means for serving the database of payment accounts has a means for opening a 
payment account and a means for crediting a payment account. 

106. (previously presented)The apparatus according to claim 101, characterized in that the 
payee device has a means for verifying the signed payee receipt. 

107. (previously presented)The apparatus according to claim 101, characterized in that 
said means for forming the payer order signed with the secret key of the payment 
certificate has a means for forming a demand for crediting the payment account. 

108. (currently amended) The apparatus according to claim 107 [1], characterized in that 
said means for forming the demand for crediting the payment account has a means for 
decreasing the level of the payment certificate signature. 

109. (previously presented) The apparatus according to claim 101, characterized in that 
the payer device, payee device and payment server are further provided with a means for 
encryption of outgoing messages and a means for decryption of incoming messages. 



